Carzy Zarx’s PC Gaming Emporium - Catch Up on All the Latest PC Gaming Related News

[JEMC]

Anyway, Asus owners that like torture and use Armory Crate, this is for you:

It's time to update Asus Armoury Crate, folks—the latest vulnerability could allow hackers to compromise your Windows OS
https://www.pcgamer.com/hardware/its-time-to-update-asus-armoury-crate-folks-the-latest-vulnerability-could-allow-hackers-to-compromise-your-os/
"System security is not a matter to be taken lightly," I tell myself as I put off updating my BIOS for another month. Even though I tend to keep physical media backups and I'm not in the habit of clicking dodgy links, that doesn't mean my machine is locked down by any means. System vulnerabilities can sneak in among the very updater utilities folks rely on—and Asus has been having especially poor luck with these as of late.

A fresh vulnerability has been uncovered in Asus Armoury Crate, the all-in-one software hub that often comes preinstalled on laptops, like the Asus ROG Flow Z13, and handhelds such as the Asus ROG Ally X, or used to control various peripherals and components.

Catalogued in NIST's National Vulnerability Database as CVE-2025-3464, the vulnerability in question can be exploited to grant hackers low-level privileges on Windows systems which could then be leveraged into compromising your OS. The prevalence of the Armoury Crate utility combined with this potential, snowballing impact has earned the vulnerability a severity rating of 8.4. That's out of 10, so it's pretty severe.

The vulnerability was first found in Armoury Crate version 5.9.13.0 by Cisco Talos' researcher Marcin "Icewall" Noga, but Asus itself has since issued a product security advisory clarifying that versions between V5.9.9.0 and V6.1.18.0 are also affected.

If you've got an Asus device, you should check which version of Armoury Crate you're running. If you're unsure, you can update to the utility's latest version by navigating to 'settings,' then 'update center,' then 'check for updates,' and finally clicking 'update.'

The rest of the article explain what this vulnerability does, in case you're interested to learn more.